본문 바로가기
KERD
논문KCI 등재

사이버위기 경보 기반 사이버 방어 훈련장 설계 및 구축 연구

Design and Implementation of Cyber Range for Cyber Defense Exercise Based on Cyber Crisis Alert

김태균|강정민|양진석|장인숙|박인성|권영재|황인택|홍순좌|최영한
한국정보보호학회 (Korea Institute Of Information Security And Cryptology)|2020.10|정보보호학회논문지 (Journal of The Korea Institute of Information Security and Cryptology)|제30권 제5호|pp. 805-821|DOI https://doi.org/10.13089/JKIISC.2020.30.5.805

0

조회

0

다운로드

5

인용

0

참고문헌

키워드

Cyber defense exerciseCyber security training
주제분류컴퓨터학

초록

사이버 방어 훈련은 최신 사이버공격을 고려한 훈련을 수행해야 할 뿐만 아니라 사이버공격 대응 과정이 실전과유사해야 그 효과가 크다고 할 수 있다. 또한 최근에는 사이버공격에 관계없이 정상업무를 수행하거나 그에 준하는업무를 지원할 수 있는 사이버 회복력에 대한 훈련 역시 중요하다. 이에 본 논문에서는 국내에서 사이버공격 발생시 발령되는 사이버위기 경보를 기반으로 실시간 사이버훈련을 수행함으로 사이버 회복력의 요소들을 강화시킬 수있는 사이버 방어 훈련장을 제안한다. 사이버위기 경보 수준에 따라 관심·주의·경계·심각 경보 발령 시, 사이버 방어훈련장은 해당 경보에 따라, 보안 요소를 점검하는 예방보안, 실시간으로 사이버공격 방어를 수행하는 실시간대응,피해 시스템의 사고조사를 수행하는 사후대응 훈련을 수행할 수 있는 환경을 지원한다. 본 논문에서 제안하는 사이버 방어 훈련장은 사이버위기 환경에서 국내 실정에 맞는 사이버 방어 훈련을 수행함으로써 훈련생들이 사이버위협에 대한 실질적인 대응 역량을 제고 할 수 있다.

Abstract

Cyber defense exercise should require training on the latest cyber attacks and have a similar process to defense cyberattacks. In addition, it is also important to train on cyber resilience that can perform normal tasks or support equivalenttasks regardless of cyber attacks. In this paper, we proposed and developed a cyber range that can strengthen the elementsof cyber resilience by performing cyber defense exercise in real time based on the cyber crisis alert issued when a cyberattack occurs in Korea. When BLUE, YELLOW, ORANGE, and RED warnings are issued according to the cyber crisis, oursystem performs proactive response, real time response, and post response according to the alarm. It can improve trainee’scapability to respond to cyber threats by performing cyber defense exercise in a cyber crisis environment similar to theactual situation of Korea.

참고문헌 (77)

  1. "Cyber Storm: Securing cyber space"[URL]
  2. "Locked Shields"[URL]
  3. "Cyber Europe 2020"[URL]
  4. "Cyber Defe nse Exercise (CDX)"[URL]
  5. E. Seker, "The concept of Cyber Defense Exercise (CDX): Planning, execution, evaluation", Proceedings of 2018International Conference on Cyber Security and Protection of Digital Services (2018)
  6. W. M. Petullo, "The use of Cyber-Defense Exercises in undergraduate computing education", Proceedings of 2016 USENIX Workshop on Advances in Security Education, pp.1~8 (2016)
  7. "Cyber Crisis Alert"[URL]
  8. Cyber resiliency design principles, "D. Bodeau", MITRE, ~, pp.17-0103 (2017)
  9. Five key technologies for enabling a Cyber-resilience framework, "F. Dickson", IBM, ~, pp.US45455119 (2019)
  10. A survey of cyber ranges and testbeds, "J. Davis", Cyber Electronic Warfare Division, ~, pp.DSTO-GD-0771 (2013)
  11. P. W. Tsai, "Control framework in network emulation testbeds: A survey", Journal of Computer Science, 22, pp.148~161 (2017)
  12. Cyber wargaming: Framework for enhancing cyber wargaming with realistic business context, "D. B. Fox", HSSEDI, ~, pp.16-J-00184-04 (2018)
  13. I. Priyadarshini, "Features and architecture of the modern cyber range: A qualitative analysis and survey", Master, pp.2018
  14. E.C. Chaskos, "Cyber-security training: A comparative analysis of cyber-ranges and emerging trends", Master, pp.2019
  15. M. M. Yamin, "Cyber ranges and security testbeds: Scenarios, functions, tools and architecture", Computer &Security, 88, pp.1~26 (2020)
  16. "Virginia Cyber Range"[URL]
  17. "Science, technolog y, engineering & math"[URL]
  18. "Wayne cyber range hub"[URL]
  19. "Cyberrange"[URL]
  20. "Cyberrange"[URL]
  21. "kinetic system"[URL]
  22. V. Giuliano, "ICSrange: A simulation-based cyber range platform for industrial control systems", Proceedings of the 15th European Dependable Computing Conference (2019)
  23. C. Pham, "CyRIS: A cyber range instantiation system for facilitating security testing", Proceedings of the 7th International Symposium on Information and Communication Technology, pp.251~258 (2016)
  24. "CROND"[URL]
  25. R. Beuran, "Integrated framework for hands-on cybersecurity training: CyTrONE", Computers and Security, 78, pp.43~59 (2018)
  26. A.K. Amorin, "CloudWhip: A tool for provisioning cyber security labs in the amazon cloud", Proceedings of 2014International Conference on Security and Management (2014)
  27. I.D. Alvarenga, "RIO: A denial of service experimentation platform in a future internet testbed", Proceedings of 7th International Conference on the Network of the Future (2016)
  28. Z. Tian, "A real-time correlation of host-level events in cyber range service for smart campus", IEEE Access, 6, pp.35355~35364 (2018)
  29. "DECIDE Platform"[URL]
  30. KYPO – A platform for cyber defense exercise, "P. Celeda", NATO Science and Technology Organization, ~, pp.STO-MP-MSG-133 (2015)
  31. J. Vykopal, "KYPO cyber range: Design and use cases", Proceedings of 12th International Conference on Software Technologies (2017)
  32. M. Rosenstein, "A secure architecture for the range-level command and control system of a national cyber range testbed", Proceedings of the 5th USENIX Workshop on Cyber Security Experimentation and Test, pp.1~9 (2012)
  33. B.C. Ferguson, "National cyber range overview", Proceedings of 2014 IEEE Military Communications Conference (2014)
  34. "CRATE, cyber range and training envir onment"[URL]
  35. N. Hatty, "Representing attacks in a cyber range", Master, pp.2019
  36. "Cyber range & training"[URL]
  37. M. Frank, "Design considerations for cyber security testbeds: A case study on a cyber security testbed for education", Proceedings of 15th International Symposium on Dependable, Automatic and Secure Computing, pp.38~46 (2017)
  38. "Cyber range platform"[URL]
  39. "Cyber ranges"[URL]
  40. "Cyberium arena"[URL]
  41. "X-force command cyber tactical operations center"[URL]
  42. "Cyber education training"[URL]
  43. "Cybergym"[URL]
  44. "Baltimore cyber’s range"[URL]
  45. "CENTS"[URL]
  46. "Florida Cyber Range"[URL]
  47. "Circadence Cyber Range"[URL]
  48. "Cyber Warfare Range"[URL]
  49. K. Hara, "Cyber range CYBERIUM for training security meisters to deal with cyber attacks", Fujitsu Scientific & Technical Journal, 55(5), pp.59~63 (2019)
  50. "CyberRange"[URL]
  51. "AWS cyber range"[URL]
  52. P. Qiu, "Cisco cyber range", ~ (2016)
  53. "Cyber-range services"[URL]
  54. SimSpace, "SimSpace cyber range", 2015 Annual Computer Security Applications Conference (2015)
  55. R. Chadha, "CyberVAN: A cyber security virtual assured network testbed", Proceedings of 2016 IEEE Military Communications Conference (2016)
  56. "Cyber range"[URL]
  57. "Cyber range"[URL]
  58. A. Ashok, "PowerCyber: A remotely accessible testbed for cyber physical security of the smart grid", Proceedings of 2016 IEEE Power &Energy Society Innovative Smart Grid Technologies Conference (2016)
  59. A. F. Browne, "Development of an architecture for a cyber-physical emulation test range for network security testing", IEEE Access, 6, pp.73273~73279 (2018)
  60. C. Javali, "Network web traffic generator for cyber range exercises", Proceedings of IEEE 44th Conference on Local Computer Networks (2019)
  61. G. Kavallierators, "Towards a cyber-physical range", Proceedings of the 5th on Cyber-Physical System Security Workshop, pp.25~34 (2019)
  62. "OpenStack"[URL]
  63. "vSphere"[URL]
  64. "KVM"[URL]
  65. "Amazon Web Service"[URL]
  66. "Azure"[URL]
  67. A.S. Raj, "Scalable and lightweight CTF infrastructures using application containers", Proceedings of 2016 USENIX Workshop on Advances in Security Education, pp.1~8 (2016)
  68. "DEFCON"[URL]
  69. J. S. Kim, "Becoming invisible hands of national live-fire attack-defense cyber exercise", Proceedings of 2019 IEEE European Symposium on Security and Privacy Workshops, pp.77~84 (2019)
  70. R. Beuran, "Realistic cybersecurity training via scenario progression management", Proceedings of 2019IEEE European Symposium on Security and Privacy Workshops, pp.67~76 (2019)
  71. E. Trickel, "Shall we play a game? CTF-as-a-service for security education", Proceedings of 2017USENIX Workshop on Advances in Security Education, pp.1~10 (2017)
  72. Automated cyber red teaming, "J. Yuen", Australian Government Department of Defence, ~, pp.DSTO-TN-1420 (2015)
  73. A. Applebaum, "Intelligent, automated red team emulation", Proceedings of the 32nd Annual Computer Security Applications Conference, pp.363~373 (2016)
  74. M. Pihelgas, "Design and implementation of an availability scoring system for cyber defense exercises", Proceedings of the 14th International Conference on Cyber Warfare and Security, pp.329~337 (2019)
  75. M. Andreolini, "A framework for the evaluation of trainee performance in cyber range exercises", Mobile Networks an Applications, 25(2), pp.236~247 (2019)
  76. National initiative for cybersecurity education (NICE)cybersecurity workforce framework, "W. Newhouse", NIST, ~, pp.800-181 (2017)
  77. Developing cyber resilient systems, "R. Ross", NIST, ~, pp.800-160 (2019)

관련 논문AI추천

사이버 훈련 및 시험평가를 위한 멀티 사이버 레인지 구조 설계 및 구현김용현, 박무성, 신동규, 안명길국방보안연구소 · 국방과 보안2022 · 제4권 제1호침해대응시간 중심의 사이버 레질리언스 평가 방안 연구김명수, 박무성, 신동규, 윤재필, 이성기, 최세호국방보안연구소 · 국방과 보안2022 · 제4권 제2호사이버전사의 훈련을 위한 시스템 구축 방안 연구김용현, 안명길한국정보보호학회 · 정보보호학회논문지2016 · 제26권 제2호공격 기법 모델링을 통한 사이버 공격 시뮬레이터 설계 및 구현강용구, 김동화, 김휘강, 박은지, 유정도한국컴퓨터정보학회 · 한국컴퓨터정보학회논문지2020 · 제25권 제3호사이버 공격·방어 시뮬레이션 연구 동향강지호, 김형선, 김휘강, 송민근, 송유찬, 이재연, 장준호, 최재웅한국정보보호학회 · 정보보호학회논문지2025 · 제35권 제5호사이버 레질리언스 평가지표 개발에 관한 연구김수진, 김정덕한국디지털정책학회 · 디지털융복합연구2017 · 제15권 제8호

이 간행물의 다른 논문 (14건)

암호장치의 송·수신자 역할 설정이 없는 양자키분배 시스템 설계장진각, 고행석, 지세완pp. 771-780μ-Hope : 오류 정정 부호를 사용한 RLWE 기반의 경량 KEM이주엽, 홍석희, 김창한, 김수리pp. 781-793SP F-함수를 갖는 4-브랜치 GFN-2 구조에 대한 기지키 공격홍득조pp. 795-803개인정보 비식별 환경에서의 개선된 응용프로그램 테스트 데이터 범위 선정 방법백송이, 이경호pp. 823-834AI를 통한 BEC (Business Email Compromise) 공격의 효과적인 대응방안 연구이경호, 이도경, 장건수pp. 835-846
원문 보기